CVE-2026-14984

CVSS 9.4 (critical) · published 2026-10-01

Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots running this software via sniffing or hijacking network traffic.

Weakness: CWE-319

Source: NVD CVE-2026-14984

References

• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0028.md

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.